Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: q/eNlOdC61RlEz4L4t8DcNrzhrNHCqXvQatDQ7viU6w=
Subject key identifier: 9C:80:4F:73:CF:F1:31:A7:C5:C7:88:DA:45:44:51:79:A0:0A:9A:24
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 0197B6A0E30950E1F13C91B72B74142A7A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:26 +0000
Manifest this update: Sat 28 Jun 2025 13:01:26 +0000
Manifest next update: Sun 29 Jun 2025 13:01:26 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: wPlNzfENiv4Ix/oyMS/ouDRG26HkSDqlzJnpn+2rPjc=)
2: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (hash: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=)
3: uVBTeEzfoyB7JY96y5uQlYBoA00.roa (hash: 1QuqtDmpz5L96A5DhcdUsvLbu6XhjJTyVS+t4jv+5BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e3:09:50:e1:f1:3c:91:b7:2b:74:14:2a:7a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Jun 28 13:01:26 2025 GMT
Not After : Jun 29 13:01:26 2025 GMT
Subject: CN=9c804f73cff131a7c5c788da45445179a00a9a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:f3:c4:00:93:2f:a0:45:c5:44:29:f5:26:
06:af:42:79:6d:63:64:f7:6a:db:be:7d:f4:e4:77:
aa:bc:c7:21:70:a0:a9:44:6f:41:f1:00:e3:95:2c:
fc:4a:46:08:b9:3e:1d:08:95:c1:82:eb:10:1c:1e:
4b:24:cd:fa:81:2b:7b:64:95:ee:fb:71:11:de:5e:
d2:75:10:be:1b:d4:b5:68:ee:5f:aa:1a:6f:e5:0a:
3f:a1:31:cf:11:3a:6b:8b:20:fa:0b:76:ce:46:fa:
93:f9:26:8f:20:ef:ec:fd:96:66:20:47:c7:61:e4:
c0:c8:f1:2d:e5:1a:84:5c:22:8d:14:b7:07:9b:8f:
8a:9c:74:c7:e1:ad:e6:91:a7:5c:04:bd:da:56:f3:
ec:e8:e4:84:73:e5:32:6b:6b:79:67:44:25:d8:09:
43:81:27:7a:24:bd:49:6e:15:c0:59:02:73:ee:7b:
ef:80:ad:56:b7:6a:62:8c:45:fe:fd:b4:66:45:85:
8f:18:0c:9c:b6:53:e2:0f:3d:27:f3:5c:d2:71:48:
ab:85:e6:21:96:2f:87:a3:1c:25:41:46:f8:b6:08:
d5:bb:3b:b2:ea:78:19:c5:e5:58:c5:a9:84:19:9e:
e7:ec:22:08:57:8b:70:48:a5:b1:1f:f0:1f:13:90:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:4F:73:CF:F1:31:A7:C5:C7:88:DA:45:44:51:79:A0:0A:9A:24
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:aa:bf:dd:d9:24:04:38:e8:2e:34:ef:d1:b3:df:81:86:77:
ef:4a:13:2f:9c:7d:84:e2:c6:5e:1d:c7:99:9c:72:b1:00:ab:
c2:5b:84:5b:13:32:ed:c6:68:e8:6a:ad:ac:7c:d7:84:ec:d6:
60:7f:ea:15:8a:b6:17:8f:7a:67:a1:97:43:19:55:7b:c6:7e:
60:2f:0a:97:34:8e:15:ec:72:dc:6c:99:b2:a4:cf:ab:b9:d0:
07:c6:ad:75:fc:6c:47:ff:a4:11:6f:f7:8e:51:d9:c9:a4:a1:
01:0e:71:b7:28:9a:9b:e6:fa:d8:b9:ff:d9:8f:df:0b:4c:ef:
6a:be:8c:ad:e4:4e:74:7a:34:29:d6:2b:61:a1:df:85:da:69:
7b:64:ce:ee:15:e0:7a:b7:a6:92:0e:80:88:60:10:1c:7e:34:
5f:df:cd:24:e8:37:df:dd:53:c1:f3:2d:8f:a8:a2:e9:86:c5:
5f:3b:47:ad:be:8b:9d:ff:bc:44:0d:1d:28:ee:a9:f7:6c:52:
ef:ed:a3:63:11:2a:a3:c3:84:3c:79:30:2d:ce:02:75:e6:a0:
72:99:0b:30:b7:a7:b1:0d:da:f9:8f:08:f2:e8:b8:8d:22:06:
fa:e7:9e:a6:c9:7c:26:6f:8f:0b:ed:f6:43:d2:5b:c3:f1:a3:
e5:67:1e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:45 2025 by rpki-client